diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ae6ff0f4..83868317 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1388,7 +1388,7 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-coverage-
       - name: Install cargo-llvm-cov
-        uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31
+        uses: taiki-e/install-action@3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2 # v2.90.2
         with:
           tool: cargo-llvm-cov
       - name: Generate coverage (LCOV)
diff --git a/.github/workflows/fuzz-smoke.yml b/.github/workflows/fuzz-smoke.yml
index 6ebbb8a3..35724e04 100644
--- a/.github/workflows/fuzz-smoke.yml
+++ b/.github/workflows/fuzz-smoke.yml
@@ -92,7 +92,7 @@ jobs:
           restore-keys: fuzz-${{ runner.os }}-
 
       - name: Install cargo-fuzz
-        uses: taiki-e/install-action@v2.87.31
+        uses: taiki-e/install-action@v2.90.2
         with:
           tool: cargo-fuzz
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d6881a93..b4006be6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -360,7 +360,7 @@ jobs:
       #     --bundle SHA256SUMS.txt.cosign.bundle \
       #     SHA256SUMS.txt
       - name: Install cosign
-        uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1
+        uses: sigstore/cosign-installer@756fe2d284c7292c4e9b62c8a28f1e5629c59532 # v4.1.3
         with:
           cosign-release: 'v2.4.1'